Post

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

buff.ly‘This Is Not A Drill’: Critical PHP Vulnerabilities Are Setting the Internet on FireThe PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

174 reposts286 likes

This is so serious. Here are the platforms with core engines written in PHP: • WordPress: powers roughly 43% of all websites on the internet, and its entire core engine is written in PHP. • Joomla, Drupal, Magento (e-commerce), MediaWiki (which runs Wikipedia), Laravel. bsky.app/profile/wire...

WIRED@wired.com

The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.

Severe Data Leaks: Beyond letting hackers take control of the server, the PHP flaw can cause a Heartbleed-style memory leak. This allows attackers to siphon out raw server RAM containing other users' passwords, active session tokens, and API keys. Take your sites offline NOW then deploy PHP patch

Debian based: apt update apt install --only-upgrade php8.3-cli php8.3-fpm php8.3-common php8.3-opcache systemctl restart php8.3-fpm Then verify: dpkg-query -W php8.3-cli php8.3-fpm This exploitable code in PHP was written by humans years ago and not by AI DFs.

I've had super weird tech fails happen in my work and home life where things are just not functioning, or medical apps are no longer supported by my phone anymore, which is crazy. Ai is shitty-ing up the internet and tech at an alarming rate and the psychos in charge of it are super ok with that.

I don't know if I would install an update created by and recommended by an AI agent known to have the goal of replicating itself, but that's just me. I won't give them credit for finding this. We don't know what schemes they are planning